| Time & API |
Arguments |
Status |
Return |
Repeated |
1619935993.008874
NtWriteFile
|
file_handle:
0x00000738
filepath:
C:\tmpsij43m\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935994.508874
NtWriteFile
|
file_handle:
0x000009f8
filepath:
C:\Users\Public\Libraries\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935994.601874
NtWriteFile
|
file_handle:
0x000001ec
filepath:
C:\Users\Administrator.Oskar-PC\Documents\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935994.679874
NtWriteFile
|
file_handle:
0x00000318
filepath:
C:\Recovery\93b8a396-9abc-11eb-88c2-ffe2e29febb8\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935994.804874
NtWriteFile
|
file_handle:
0x00000324
filepath:
C:\Users\Administrator.Oskar-PC\Contacts\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935994.961874
NtWriteFile
|
file_handle:
0x000007e8
filepath:
C:\Users\Public\Recorded TV\Sample Media\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935995.086874
NtWriteFile
|
file_handle:
0x000002d4
filepath:
C:\Users\Administrator.Oskar-PC\Searches\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935995.086874
NtWriteFile
|
file_handle:
0x00000798
filepath:
C:\Users\Administrator.Oskar-PC\Searches\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935995.398874
NtWriteFile
|
file_handle:
0x00000b68
filepath:
C:\tmpsij43m\modules\auxiliary\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935995.539874
NtWriteFile
|
file_handle:
0x00000468
filepath:
C:\tmpsij43m\lib\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935995.570874
NtWriteFile
|
file_handle:
0x00000614
filepath:
C:\tmpsij43m\bin\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935998.086874
NtWriteFile
|
file_handle:
0x00000e98
filepath:
C:\ProgramData\Microsoft\IlsCache\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935999.461874
NtWriteFile
|
file_handle:
0x000002f0
filepath:
C:\tmpsij43m\modules\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619935999.648874
NtWriteFile
|
file_handle:
0x000011e4
filepath:
C:\tmpsij43m\lib\common\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936001.429874
NtWriteFile
|
file_handle:
0x00001598
filepath:
C:\ProgramData\Microsoft\Crypto\Keys\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936001.508874
NtWriteFile
|
file_handle:
0x0000085c
filepath:
C:\ProgramData\Microsoft\RAC\StateData\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936001.617874
NtWriteFile
|
file_handle:
0x00001544
filepath:
C:\ProgramData\Microsoft\MF\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936001.961874
NtWriteFile
|
file_handle:
0x000015b4
filepath:
C:\Program Files\Google\Chrome\Application\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.117874
NtWriteFile
|
file_handle:
0x0000159c
filepath:
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.117874
NtWriteFile
|
file_handle:
0x00000e90
filepath:
C:\Program Files (x86)\Microsoft.NET\RedistList\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.164874
NtWriteFile
|
file_handle:
0x00000f08
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.273874
NtWriteFile
|
file_handle:
0x00000650
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.273874
NtWriteFile
|
file_handle:
0x00001440
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.476874
NtWriteFile
|
file_handle:
0x0000133c
filepath:
C:\Program Files\Google\Chrome\Application\Dictionaries\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.633874
NtWriteFile
|
file_handle:
0x000012e0
filepath:
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.633874
NtWriteFile
|
file_handle:
0x0000148c
filepath:
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.789874
NtWriteFile
|
file_handle:
0x000003e0
filepath:
C:\ProgramData\Microsoft\User Account Pictures\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.992874
NtWriteFile
|
file_handle:
0x000009fc
filepath:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936002.992874
NtWriteFile
|
file_handle:
0x000007ec
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.398874
NtWriteFile
|
file_handle:
0x000007a0
filepath:
C:\Users\Public\Pictures\Sample Pictures\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.398874
NtWriteFile
|
file_handle:
0x00001290
filepath:
C:\Users\Public\Music\Sample Music\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.539874
NtWriteFile
|
file_handle:
0x0000133c
filepath:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.539874
NtWriteFile
|
file_handle:
0x000018d0
filepath:
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.586874
NtWriteFile
|
file_handle:
0x000018b8
filepath:
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.711874
NtWriteFile
|
file_handle:
0x00001a10
filepath:
C:\Program Files\Google\Chrome\Application\SetupMetrics\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936003.883874
NtWriteFile
|
file_handle:
0x000012a4
filepath:
C:\tmpsij43m\lib\api\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.242874
NtWriteFile
|
file_handle:
0x00001318
filepath:
C:\tmpsij43m\modules\packages\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.476874
NtWriteFile
|
file_handle:
0x000017ac
filepath:
C:\ProgramData\Microsoft\Assistance\Client\1.0\zh-CN\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.570874
NtWriteFile
|
file_handle:
0x00000978
filepath:
C:\Users\Public\Videos\Sample Videos\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.664874
NtWriteFile
|
file_handle:
0x00000598
filepath:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_e44d9bd7eba8ad7f54ca160a4fc3d2a5d4c60_cab_055f7698\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.679874
NtWriteFile
|
file_handle:
0x0000126c
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Windows Live\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.789874
NtWriteFile
|
file_handle:
0x00000de0
filepath:
C:\Users\Public\Pictures\Sample Pictures\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936004.961874
NtWriteFile
|
file_handle:
0x00000638
filepath:
C:\Program Files\Oracle\VirtualBox Guest Additions\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936005.461874
NtWriteFile
|
file_handle:
0x0000125c
filepath:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_05eac559\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936005.617874
NtWriteFile
|
file_handle:
0x00001350
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Microsoft 网站\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936005.758874
NtWriteFile
|
file_handle:
0x00000a1c
filepath:
C:\Users\Administrator.Oskar-PC\AppData\Local\pip\cache\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936005.836874
NtWriteFile
|
file_handle:
0x000006d8
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Links for 中国\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936005.836874
NtWriteFile
|
file_handle:
0x000009e8
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936006.086874
NtWriteFile
|
file_handle:
0x00000598
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\MSN 网站\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|
1619936006.086874
NtWriteFile
|
file_handle:
0x00001350
filepath:
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\2BB98-Readme.txt
buffer:
Hi!
Your files are encrypted.
All encrypted files for this computer has extension: .2bb98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised,
rebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,
it could be files on the network belonging to other users, sure you want to take that responsibility?
--
Our encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.
The only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.
We advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.
For us this is just business and to prove to you our seriousness, we will decrypt you some files for free,
but we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.
Сontact us:
1.2Hamlampampom@cock.li
2.Galgalgalgalk@tutanota.com
Don't forget to include your code in the email:
{code_2320c429_2bb98:
jYwNv+NnTawnVLtMDC3jNaI9zYTF1mFvAK0XoFSW05KGlkc2yP
xlSe5VUIh57nHiG4PlG+ynwKhtrOy2lwZYXQzHxfk/2yN6KcQg
I278IneVA3mHuO6vZSTFXkGrD9PJzprTKF1XLi3J+9lABvAjym
EA7f+aWFWPJc/2tl9WK24USc9wCDS9iK/OVrK/gzSNHWF+Ew5D
k7Kpzsv5DSoiWUgO1K4elPrI2I+mNAh/aGsvb6bL8DjD0u1ESz
xtggfQ7fZvZHPBD1U1LVAhZ4tw0oKl+J0=}
offset:
0
|
success
|
0 |
0
|